Remote Secure Element Access Through Cloud-Based Provisioning
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Secure elements (SEs) are inconvenient and restricted due to the need for physical possession and control by mobile network operators or device manufacturers, limiting their usability beyond their intended purposes.
Innovation Solution
A cloud computing environment is used to provide remote secure element services, allowing users to access SEs without physical possession, using multi-factor authentication and unique identifiers for secure element applications, enabling secure transactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If secure elements are integrated into host devices or controlled by mobile network operators, then security is improved, but usability and accessibility are worsened due to physical possession requirements and control limitations
Solution Approach 1:
The patent creates a cloud-based copy of secure element functionality. Instead of requiring physical possession of a secure element chip, the system provisioned secure element applications and data over electronic communication channels to remote devices. This allows users to access secure element services without carrying physical SIM cards or smart cards, resolving the contradiction between maintaining security through physical control and enabling convenient remote access.
Solution Approach 2:
The patent introduces a cloud computing environment as an intermediary between the secure element provider and the user's device. This intermediary provisions secure element applications, manages authentication, and handles transactions remotely. The intermediary enables secure element functionality to be accessed without physical possession while maintaining security through controlled provisioning and authentication mechanisms.
2Reliability
If secure elements require physical possession and control by third parties, then security is improved, but adaptability and versatility are worsened
Solution Approach 1:
The patent enables secure element applications to be provisioned to multiple different device types and used for various purposes beyond traditional SIM card functions. The cloud-based provisioning system can deliver secure element applications to smartphones, tablets, wearables, and other devices with electronic communication capabilities. This universal approach allows the same secure element infrastructure to serve multiple functions and device types, greatly enhancing adaptability and versatility.
Solution Approach 2:
The patent transforms the static, physically-bound secure element model into a dynamic system where secure element applications can be remotely provisioned, updated, and revoked. The cloud-based system allows flexible allocation of secure element resources to different users and devices as needed, enabling dynamic adaptation to changing requirements while maintaining security through controlled access.
3Ease of operation
If secure elements are accessed remotely via cloud computing, then usability is improved, but security risks are worsened due to remote access vulnerabilities
Solution Approach 1:
The patent performs security verification and authentication in advance before allowing remote access to secure element applications. The system establishes secure communication channels, verifies device credentials, and authenticates user identities before provisioning or executing secure element transactions. This preliminary security action ensures that only authorized devices and users can access remote secure element services, mitigating security risks while enabling convenient remote access.
Solution Approach 2:
The patent implements continuous monitoring and verification mechanisms during remote secure element operations. The system tracks authentication status, monitors transaction integrity, and verifies communication channel security in real-time. This feedback mechanism allows the system to detect and respond to security threats during remote operations, maintaining security while enabling convenient access.
Data Source
AI summary
A cloud computing environment for providing remote secure element services, comprising at least one server, a plurality of secure elements being connectable to the at least one server, each secure element having a secure element identifier and comprising at least one secure element application having a secure element application identifier, each secure element application being uniquely addressable by the at least one server with the secure element identifier of the secure element containing the given secure element application and the secure element application identifier of the given secure element application. A method for providing secure element services performed by the cloud computing environment is also disclosed.


